Unspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to add additional roles to their user account via unknown attack vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dotnetnuke | Dotnetnuke | 4.5.2 (including) | 4.5.2 (including) |
| Dotnetnuke | Dotnetnuke | 4.8.1 (including) | 4.8.1 (including) |
| Dotnetnuke | Dotnetnuke | 4.8.2 (including) | 4.8.2 (including) |
| Dotnetnuke | Dotnetnuke | 4.8.3 (including) | 4.8.3 (including) |
| Dotnetnuke | Dotnetnuke | 4.8.4 (including) | 4.8.4 (including) |
| Dotnetnuke | Dotnetnuke | 4.9 (including) | 4.9 (including) |
References
- http://osvdb.org/51141
- http://secunia.com/advisories/33401
- http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno24/tabid/1188/Default.aspx
- http://www.securityfocus.com/bid/33109
- http://osvdb.org/51141
- http://secunia.com/advisories/33401
- http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno24/tabid/1188/Default.aspx
- http://www.securityfocus.com/bid/33109